IG (subwords)
Zoho ManageEngine Remote ▁Access ▁Plus ▁before ▁10 . 1 . 212 1 . 1 ▁has hardcoded credential ▁ s ▁for read-only ▁access . ▁The credential ▁ s ▁are ▁in ▁the ▁source ▁code ▁that ▁correspond s ▁to ▁the ▁DC Backup Restore JAR ▁archive . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.

SHAP (words)
Zoho ManageEngine Remote Access Plus before 10. 1. 2121. 1 has hardcoded credentials for read- only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive

IG (subwords)
[CLS] Zoho ManageEngine Remote Access Plus before 10 . 1 . 212 ##1 . 1 has hardcoded credential s for read-only access . The credential s are in the source code that corresponds to the DC Backup Restore JAR archive . [SEP]

LRP (+Pred, pos-only)
[CLS] Zoho ManageEngine Remote Access Plus before 10 . 1 . 212 ##1 . 1 has hardcoded credential s for read-only access . The credential s are in the source code that corresponds to the DC Backup Restore JAR archive . [SEP]

LIME (words)
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.

SHAP (words)
Zoho ManageEngine Remote Access Plus before 10. 1. 2121. 1 has hardcoded credentials for read- only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive

IG (subwords)
[CLS] Zoho ManageEngine Remote Access Plus before 10 . 1 . 212 ##1 . 1 has hardcoded credential s for read-only access . The credential s are in the source code that corresponds to the DC Backup Restore JAR archive . [SEP]

LRP (+Pred, pos-only)
[CLS] Zoho ManageEngine Remote Access Plus before 10 . 1 . 212 ##1 . 1 has hardcoded credential s for read-only access . The credential s are in the source code that corresponds to the DC Backup Restore JAR archive . [SEP]

LIME (words)
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive.

SHAP (words)
Zoho ManageEngine Remote Access Plus before 10. 1. 2121. 1 has hardcoded credentials for read- only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive

IG (subwords)
▁On ▁certain ▁Samsung ▁P ( 9 . 0 ) ▁phones ▁an ▁attacker ▁with ▁physical ▁access ▁can ▁start ▁a TCP Dump ▁c apt ▁ ure ▁without ▁the ▁user ' s ▁knowledge . ▁This ▁feature ▁of ▁the ▁Service ▁Mode ▁application ▁is ▁available ▁after ▁entering ▁the ▁* # 99 00 # ▁check ▁code ▁but ▁is ▁protected ▁by ▁an OTP ▁password . ▁However ▁this ▁password ▁is ▁created ▁locally ▁and ▁ ( due ▁to mishandling ▁of cryptography ▁ ) ▁can ▁be ▁obtained ▁easily ▁by ▁reversing ▁the ▁password ▁creation ▁logic . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
On certain Samsung P(9.0) phones an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code but is protected by an OTP password. However this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.

SHAP (words)
On certain Samsung P( 9. 0) phones an attacker with physical access can start a TCP Dump capture without the user' s knowledge. This feature of the Service Mode application is available after entering the *# 9900# check code but is protected by an OTP password. However this password is created locally and ( due to mishandling of cryptography) can be obtained easily by reversing the password creation logic

IG (subwords)
[CLS] On certain Samsung P ( 9 . 0 ) phones an attacker with physical access can s tar t a TCP Dump c apt u ##re without the user ' s knowledge . This feature of the Service Mode application is available after entering the * # 99 ##00 # check code but is protected by an OTP password . However this password is created locally and ( due to mishandling of cryptography ) can be obtained easily by re ##versing the password creation logic . [SEP]

LRP (+Pred, pos-only)
[CLS] On certain Samsung P ( 9 . 0 ) phones an attacker with physical access can s tar t a TCP Dump c apt u ##re without the user ' s knowledge . This feature of the Service Mode application is available after entering the * # 99 ##00 # check code but is protected by an OTP password . However this password is created locally and ( due to mishandling of cryptography ) can be obtained easily by re ##versing the password creation logic . [SEP]

LIME (words)
On certain Samsung P(9.0) phones an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code but is protected by an OTP password. However this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.

SHAP (words)
On certain Samsung P( 9. 0) phones an attacker with physical access can start a TCP Dump capture without the user' s knowledge. This feature of the Service Mode application is available after entering the *# 9900# check code but is protected by an OTP password. However this password is created locally and ( due to mishandling of cryptography) can be obtained easily by reversing the password creation logic

IG (subwords)
[CLS] On certain Samsung P ( 9 . 0 ) phones an attacker with physical access can s tar t a TCP Dump c apt u ##re without the user ' s knowledge . This feature of the Service Mode application is available after entering the * # 99 ##00 # check code but is protected by an OTP password . However this password is created locally and ( due to mishandling of cryptography ) can be obtained easily by re ##versing the password creation logic . [SEP]

LRP (+Pred, pos-only)
[CLS] On certain Samsung P ( 9 . 0 ) phones an attacker with physical access can s tar t a TCP Dump c apt u ##re without the user ' s knowledge . This feature of the Service Mode application is available after entering the * # 99 ##00 # check code but is protected by an OTP password . However this password is created locally and ( due to mishandling of cryptography ) can be obtained easily by re ##versing the password creation logic . [SEP]

LIME (words)
On certain Samsung P(9.0) phones an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code but is protected by an OTP password. However this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.

SHAP (words)
On certain Samsung P( 9. 0) phones an attacker with physical access can start a TCP Dump capture without the user' s knowledge. This feature of the Service Mode application is available after entering the *# 9900# check code but is protected by an OTP password. However this password is created locally and ( due to mishandling of cryptography) can be obtained easily by reversing the password creation logic

IG (subwords)
SolarView Compact ▁ ver . 6 . 00 ▁was ▁di sc ▁over ed ▁to ▁contain ▁a ▁command inject ▁ ion ▁vulnerability ▁via ▁ conf _ mail . php . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

SHAP (words)
SolarView Compact ver. 6. 00 was discovered to contain a command injection vulnerability via conf_mail. php

IG (subwords)
[CLS] SolarView Compact ve ##r . 6 . 00 was di sc over ##ed to contain a command inject ion vulnerability via con ##f _ mail . php . [SEP]

LRP (+Pred, pos-only)
[CLS] SolarView Compact ve ##r . 6 . 00 was di sc over ##ed to contain a command inject ion vulnerability via con ##f _ mail . php . [SEP]

LIME (words)
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

SHAP (words)
SolarView Compact ver. 6. 00 was discovered to contain a command injection vulnerability via conf_mail. php

IG (subwords)
[CLS] SolarView Compact ve ##r . 6 . 00 was di sc over ##ed to contain a command inject ion vulnerability via con ##f _ mail . php . [SEP]

LRP (+Pred, pos-only)
[CLS] SolarView Compact ve ##r . 6 . 00 was di sc over ##ed to contain a command inject ion vulnerability via con ##f _ mail . php . [SEP]

LIME (words)
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

SHAP (words)
SolarView Compact ver. 6. 00 was discovered to contain a command injection vulnerability via conf_mail. php

IG (subwords)
▁A ▁vulnerability ▁has ▁been ▁found ▁in Tenda ▁W 9 ▁1 . 0 . 0 . 7 ( 44 56 ) ▁and ▁ cla ssi ▁ fi ed ▁as ▁critical . ▁This ▁vulnerability ▁affects ▁the ▁function ▁form Q os Manage ▁_ auto ▁of ▁the ▁component httpd ▁ . ▁The ▁manipulation ▁of ▁the ▁argument ssid ▁Index ▁leads ▁to stack-based ▁buffer overflow ▁ . ▁The ▁attack ▁can ▁be init ▁ iated ▁remotely . ▁The ▁exploit ▁has ▁been disclose ▁ d ▁to ▁the ▁public ▁and ▁may ▁be ▁used . ▁The identifier ▁of ▁this ▁vulnerability ▁is ▁V DB - 25 07 08 . NOT ▁E : ▁The ▁vendor ▁was ▁contacted ▁early ▁about ▁this ▁di sc ▁ los ure ▁but ▁did ▁not ▁respond ▁in ▁any ▁way . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

SHAP (words)
A vulnerability has been found in Tenda W9 1. 0. 0. 7( 4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack- based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB- 250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way

IG (subwords)
[CLS] A vulnerability has been found in Tenda W ##9 1 . 0 . 0 . 7 ( 44 ##5 ##6 ) and c ##la ssi fi ##ed as critical . This vulnerability affects the function form ##Q ##os Manage _ auto of the component httpd . The man ip ul ##ation of the argument ssid Index leads to stack-based buffer overflow . The attack can be init i ##ated remotely . The exploit has been disclose d to the public and may be used . The identifier of this vulnerability is V ##D ##B - 250 ##70 ##8 . NOT E : The vendor was contacted early about this di sc los ##ure but did not respond in any way . [SEP]

LRP (+Pred, pos-only)
[CLS] A vulnerability has been found in Tenda W ##9 1 . 0 . 0 . 7 ( 44 ##5 ##6 ) and c ##la ssi fi ##ed as critical . This vulnerability affects the function form ##Q ##os Manage _ auto of the component httpd . The man ip ul ##ation of the argument ssid Index leads to stack-based buffer overflow . The attack can be init i ##ated remotely . The exploit has been disclose d to the public and may be used . The identifier of this vulnerability is V ##D ##B - 250 ##70 ##8 . NOT E : The vendor was contacted early about this di sc los ##ure but did not respond in any way . [SEP]

LIME (words)
A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

SHAP (words)
A vulnerability has been found in Tenda W9 1. 0. 0. 7( 4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack- based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB- 250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way

IG (subwords)
[CLS] A vulnerability has been found in Tenda W ##9 1 . 0 . 0 . 7 ( 44 ##5 ##6 ) and c ##la ssi fi ##ed as critical . This vulnerability affects the function form ##Q ##os Manage _ auto of the component httpd . The man ip ul ##ation of the argument ssid Index leads to stack-based buffer overflow . The attack can be init i ##ated remotely . The exploit has been disclose d to the public and may be used . The identifier of this vulnerability is V ##D ##B - 250 ##70 ##8 . NOT E : The vendor was contacted early about this di sc los ##ure but did not respond in any way . [SEP]

LRP (+Pred, pos-only)
[CLS] A vulnerability has been found in Tenda W ##9 1 . 0 . 0 . 7 ( 44 ##5 ##6 ) and c ##la ssi fi ##ed as critical . This vulnerability affects the function form ##Q ##os Manage _ auto of the component httpd . The man ip ul ##ation of the argument ssid Index leads to stack-based buffer overflow . The attack can be init i ##ated remotely . The exploit has been disclose d to the public and may be used . The identifier of this vulnerability is V ##D ##B - 250 ##70 ##8 . NOT E : The vendor was contacted early about this di sc los ##ure but did not respond in any way . [SEP]

LIME (words)
A vulnerability has been found in Tenda W9 1.0.0.7(4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

SHAP (words)
A vulnerability has been found in Tenda W9 1. 0. 0. 7( 4456) and classified as critical. This vulnerability affects the function formQosManage_auto of the component httpd. The manipulation of the argument ssidIndex leads to stack- based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB- 250708. NOTE: The vendor was contacted early about this disclosure but did not respond in any way

IG (subwords)
▁An ▁issue ▁was ▁di sc ▁over ed ▁in Xen ▁through ▁4 . 14 . x . ▁x 86 ▁ PV ▁guest kernels ▁can ▁experience ▁denial ▁of ▁service ▁via ▁SY S EN TER . ▁The ▁SY S EN TER ▁instruction ▁leaves ▁various ▁state sanitization ▁activities ▁to ▁software . ▁One ▁of Xen ▁ ' s sanitization ▁paths inject ▁ s ▁a ▁ # GP ▁fault ▁and ▁incorrectly ▁delivers ▁it ▁twice ▁to ▁the ▁guest . ▁This ▁causes ▁the ▁guest ▁kernel ▁to ▁observe ▁a ▁kernel - priv ile ge ▁ # GP ▁fault ▁ ( typical ly ▁fatal ) ▁rather ▁than ▁a ▁user - priv ile ge ▁ # GP ▁fault ▁ ( usually ▁converted ▁into SIGSEGV ▁ / et c . ) . Malicious ▁or buggy userspace ▁can ▁crash ▁the ▁guest ▁kernel ▁resulting ▁in ▁a ▁ VM Denial ▁of ▁Service . ▁All ▁versions ▁of Xen ▁from ▁3 . 2 ▁onwards ▁are ▁vulnerable . ▁Only ▁x 86 ▁systems ▁are ▁vulnerable . ▁ ARM ▁platforms ▁are ▁not ▁vulnerable . ▁Only ▁x 86 ▁systems ▁that ▁support ▁the ▁SY S EN TER ▁instruction ▁in ▁64 bit ▁mode ▁are ▁vulnerable . ▁This ▁is ▁believed ▁to ▁be ▁Intel ▁Cent a ur ▁and ▁Shanghai CPUs ▁ . AMD ▁and ▁Hy gon CPUs ▁are ▁not ▁believed ▁to ▁be ▁vulnerable . ▁Only ▁x 86 ▁ PV ▁guests ▁can ▁exploit ▁the ▁vulnerability . ▁x 86 PVH ▁ / HVM ▁guests ▁cannot ▁exploit ▁the ▁vulnerability . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.

SHAP (words)
An issue was discovered in Xen through 4. 14. x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen' s sanitization paths injects a # GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel- privilege # GP fault ( typically fatal) rather than a user- privilege # GP fault ( usually converted into SIGSEGV/ etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3. 2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability

IG (subwords)
[CLS] An issue was di sc over ##ed in Xen through 4 . 14 . x . x ##86 PV guest kernels can experience denial of service via S ##Y ##SE NT ER . The S ##Y ##SE NT ER in struct ion leaves various state sanitization activities to software . One of Xen ' s sanitization paths inject s a # GP fault and incorrectly delivers it twice to the guest . This causes the guest kernel to observe a kernel - privilege # GP fault ( typically fatal ) rather than a user - privilege # GP fault ( usually converted int o SIGSEGV / etc . ) . Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service . All versions of Xen from 3 . 2 onwards are vulnerable . Only x ##86 systems are vulnerable . ARM platforms are not vulnerable . Only x ##86 systems that support the S ##Y ##SE NT ER in struct ion in 64 ##bit mod e are vulnerable . This is believed to be Intel Ce ##nta ##ur and Shanghai CPUs . AMD and H ##y ##gon CPUs are not believed to be vulnerable . Only x ##86 PV guests can exploit the vulnerability . x ##86 PVH / HVM guests cannot exploit the vulnerability . [SEP]

LRP (+Pred, pos-only)
[CLS] An issue was di sc over ##ed in Xen through 4 . 14 . x . x ##86 PV guest kernels can experience denial of service via S ##Y ##SE NT ER . The S ##Y ##SE NT ER in struct ion leaves various state sanitization activities to software . One of Xen ' s sanitization paths inject s a # GP fault and incorrectly delivers it twice to the guest . This causes the guest kernel to observe a kernel - privilege # GP fault ( typically fatal ) rather than a user - privilege # GP fault ( usually converted int o SIGSEGV / etc . ) . Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service . All versions of Xen from 3 . 2 onwards are vulnerable . Only x ##86 systems are vulnerable . ARM platforms are not vulnerable . Only x ##86 systems that support the S ##Y ##SE NT ER in struct ion in 64 ##bit mod e are vulnerable . This is believed to be Intel Ce ##nta ##ur and Shanghai CPUs . AMD and H ##y ##gon CPUs are not believed to be vulnerable . Only x ##86 PV guests can exploit the vulnerability . x ##86 PVH / HVM guests cannot exploit the vulnerability . [SEP]

LIME (words)
An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.

SHAP (words)
An issue was discovered in Xen through 4. 14. x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen' s sanitization paths injects a # GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel- privilege # GP fault ( typically fatal) rather than a user- privilege # GP fault ( usually converted into SIGSEGV/ etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3. 2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability

IG (subwords)
[CLS] An issue was di sc over ##ed in Xen through 4 . 14 . x . x ##86 PV guest kernels can experience denial of service via S ##Y ##SE NT ER . The S ##Y ##SE NT ER in struct ion leaves various state sanitization activities to software . One of Xen ' s sanitization paths inject s a # GP fault and incorrectly delivers it twice to the guest . This causes the guest kernel to observe a kernel - privilege # GP fault ( typically fatal ) rather than a user - privilege # GP fault ( usually converted int o SIGSEGV / etc . ) . Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service . All versions of Xen from 3 . 2 onwards are vulnerable . Only x ##86 systems are vulnerable . ARM platforms are not vulnerable . Only x ##86 systems that support the S ##Y ##SE NT ER in struct ion in 64 ##bit mod e are vulnerable . This is believed to be Intel Ce ##nta ##ur and Shanghai CPUs . AMD and H ##y ##gon CPUs are not believed to be vulnerable . Only x ##86 PV guests can exploit the vulnerability . x ##86 PVH / HVM guests cannot exploit the vulnerability . [SEP]

LRP (+Pred, pos-only)
[CLS] An issue was di sc over ##ed in Xen through 4 . 14 . x . x ##86 PV guest kernels can experience denial of service via S ##Y ##SE NT ER . The S ##Y ##SE NT ER in struct ion leaves various state sanitization activities to software . One of Xen ' s sanitization paths inject s a # GP fault and incorrectly delivers it twice to the guest . This causes the guest kernel to observe a kernel - privilege # GP fault ( typically fatal ) rather than a user - privilege # GP fault ( usually converted int o SIGSEGV / etc . ) . Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service . All versions of Xen from 3 . 2 onwards are vulnerable . Only x ##86 systems are vulnerable . ARM platforms are not vulnerable . Only x ##86 systems that support the S ##Y ##SE NT ER in struct ion in 64 ##bit mod e are vulnerable . This is believed to be Intel Ce ##nta ##ur and Shanghai CPUs . AMD and H ##y ##gon CPUs are not believed to be vulnerable . Only x ##86 PV guests can exploit the vulnerability . x ##86 PVH / HVM guests cannot exploit the vulnerability . [SEP]

LIME (words)
An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.

SHAP (words)
An issue was discovered in Xen through 4. 14. x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen' s sanitization paths injects a # GP fault and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel- privilege # GP fault ( typically fatal) rather than a user- privilege # GP fault ( usually converted into SIGSEGV/ etc.). Malicious or buggy userspace can crash the guest kernel resulting in a VM Denial of Service. All versions of Xen from 3. 2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel Centaur and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability

IG (subwords)
▁There ▁is ▁a ▁vulnerability ▁in ▁21 . 3 28 . 01 . 00 . 00 ▁version ▁of ▁the ▁E 55 73 C s - 32 2 . Remote ▁attackers ▁could ▁exploit ▁this ▁vulnerability ▁to ▁make ▁the ▁network ▁where ▁the ▁E 55 73 C s - 32 2 ▁is ▁running temp ▁or arily ▁unavailable . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable.

SHAP (words)
There is a vulnerability in 21. 328. 01. 00. 00 version of the E5573Cs- 322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs- 322 is running temporarily unavailable

IG (subwords)
[CLS] There is a vulnerability in 21 . 32 ##8 . 01 . 00 . 00 version of the E ##55 ##7 ##3 ##Cs - 322 . Remote attackers could exploit this vulnerability to make the network where the E ##55 ##7 ##3 ##Cs - 322 is running temp or ##arily unavailable . [SEP]

LRP (+Pred, pos-only)
[CLS] There is a vulnerability in 21 . 32 ##8 . 01 . 00 . 00 version of the E ##55 ##7 ##3 ##Cs - 322 . Remote attackers could exploit this vulnerability to make the network where the E ##55 ##7 ##3 ##Cs - 322 is running temp or ##arily unavailable . [SEP]

LIME (words)
There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable.

SHAP (words)
There is a vulnerability in 21. 328. 01. 00. 00 version of the E5573Cs- 322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs- 322 is running temporarily unavailable

IG (subwords)
[CLS] There is a vulnerability in 21 . 32 ##8 . 01 . 00 . 00 version of the E ##55 ##7 ##3 ##Cs - 322 . Remote attackers could exploit this vulnerability to make the network where the E ##55 ##7 ##3 ##Cs - 322 is running temp or ##arily unavailable . [SEP]

LRP (+Pred, pos-only)
[CLS] There is a vulnerability in 21 . 32 ##8 . 01 . 00 . 00 version of the E ##55 ##7 ##3 ##Cs - 322 . Remote attackers could exploit this vulnerability to make the network where the E ##55 ##7 ##3 ##Cs - 322 is running temp or ##arily unavailable . [SEP]

LIME (words)
There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable.

SHAP (words)
There is a vulnerability in 21. 328. 01. 00. 00 version of the E5573Cs- 322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs- 322 is running temporarily unavailable

IG (subwords)
▁node - jo se ▁is ▁a JavaScript ▁implementation ▁of ▁the JSON ▁ Object ▁Sign ing ▁and Encryption ▁ ( J OSE ) ▁for ▁web browsers ▁and ▁node . js ▁ - based ▁servers . ▁Prior ▁to ▁version ▁2 . 2 . 0 ▁when ▁using ▁the non-default ▁ " fallback ▁ " crypto back-end ECC ▁operations ▁in ▁` no de - jo se ` ▁can ▁trigger ▁a Denial-of-Service ▁ ( DoS ▁ ) ▁condition ▁due ▁to ▁a ▁po ssi ▁ ble ▁in f init ▁ e ▁loop ▁in ▁an ▁internal ▁calculation . ▁For ▁some ECC ▁operations ▁this ▁condition ▁is ▁triggered ▁randomly ; ▁for ▁others ▁it ▁can ▁be ▁triggered ▁by malicious ▁input . ▁The ▁issue ▁has ▁been patched ▁in ▁version ▁2 . 2 . 0 . ▁Since ▁this ▁issue ▁is ▁only ▁present ▁in ▁the ▁ " fallback ▁ " crypto ▁implementation ▁it ▁can ▁be ▁avoided ▁by ▁ensuring ▁that ▁either ▁Web Crypto ▁or ▁the Node ▁` crypto ▁` ▁module ▁is ▁available ▁in ▁the JS ▁environment ▁where ▁` no de - jo se ` ▁is ▁being ▁run . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0 when using the non-default "fallback" crypto back-end ECC operations in `node-jose` can trigger a Denial-of-Service (DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2.2.0. Since this issue is only present in the "fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node `crypto` module is available in the JS environment where `node-jose` is being run.

SHAP (words)
node- jose is a JavaScript implementation of the JSON Object Signing and Encryption ( JOSE) for web browsers and node. js- based servers. Prior to version 2. 2. 0 when using the non- default " fallback" crypto back- end ECC operations in ` node- jose` can trigger a Denial- of- Service ( DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2. 2. 0. Since this issue is only present in the " fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node ` crypto` module is available in the JS environment where ` node- jose` is being run

IG (subwords)
[CLS] node - j ##ose is a JavaScript implementation of the JSON Object Sign ##ing and Encryption ( J ##OS ##E ) for web browsers and node . js - based servers . Prior to version 2 . 2 . 0 when using the non-default " fallback " crypto back-end ECC operations in ` node - j ##ose ` can trigger a Denial-of-Service ( DoS ) condition due to a p ##o ssi b ##le in ##f init e loop in an int er ##nal calculation . For some ECC operations this condition is triggered randomly ; for others it can be triggered by malicious input . The issue has been patched in version 2 . 2 . 0 . Since this issue is only present in the " fallback " crypto implementation it can be avoided by en ##s uri ng that either Web Crypto or the Node ` crypto ` mod ul ##e is available in the JS environment where ` node - j ##ose ` is being run . [SEP]

LRP (+Pred, pos-only)
[CLS] node - j ##ose is a JavaScript implementation of the JSON Object Sign ##ing and Encryption ( J ##OS ##E ) for web browsers and node . js - based servers . Prior to version 2 . 2 . 0 when using the non-default " fallback " crypto back-end ECC operations in ` node - j ##ose ` can trigger a Denial-of-Service ( DoS ) condition due to a p ##o ssi b ##le in ##f init e loop in an int er ##nal calculation . For some ECC operations this condition is triggered randomly ; for others it can be triggered by malicious input . The issue has been patched in version 2 . 2 . 0 . Since this issue is only present in the " fallback " crypto implementation it can be avoided by en ##s uri ng that either Web Crypto or the Node ` crypto ` mod ul ##e is available in the JS environment where ` node - j ##ose ` is being run . [SEP]

LIME (words)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0 when using the non-default "fallback" crypto back-end ECC operations in `node-jose` can trigger a Denial-of-Service (DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2.2.0. Since this issue is only present in the "fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node `crypto` module is available in the JS environment where `node-jose` is being run.

SHAP (words)
node- jose is a JavaScript implementation of the JSON Object Signing and Encryption ( JOSE) for web browsers and node. js- based servers. Prior to version 2. 2. 0 when using the non- default " fallback" crypto back- end ECC operations in ` node- jose` can trigger a Denial- of- Service ( DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2. 2. 0. Since this issue is only present in the " fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node ` crypto` module is available in the JS environment where ` node- jose` is being run

IG (subwords)
[CLS] node - j ##ose is a JavaScript implementation of the JSON Object Sign ##ing and Encryption ( J ##OS ##E ) for web browsers and node . js - based servers . Prior to version 2 . 2 . 0 when using the non-default " fallback " crypto back-end ECC operations in ` node - j ##ose ` can trigger a Denial-of-Service ( DoS ) condition due to a p ##o ssi b ##le in ##f init e loop in an int er ##nal calculation . For some ECC operations this condition is triggered randomly ; for others it can be triggered by malicious input . The issue has been patched in version 2 . 2 . 0 . Since this issue is only present in the " fallback " crypto implementation it can be avoided by en ##s uri ng that either Web Crypto or the Node ` crypto ` mod ul ##e is available in the JS environment where ` node - j ##ose ` is being run . [SEP]

LRP (+Pred, pos-only)
[CLS] node - j ##ose is a JavaScript implementation of the JSON Object Sign ##ing and Encryption ( J ##OS ##E ) for web browsers and node . js - based servers . Prior to version 2 . 2 . 0 when using the non-default " fallback " crypto back-end ECC operations in ` node - j ##ose ` can trigger a Denial-of-Service ( DoS ) condition due to a p ##o ssi b ##le in ##f init e loop in an int er ##nal calculation . For some ECC operations this condition is triggered randomly ; for others it can be triggered by malicious input . The issue has been patched in version 2 . 2 . 0 . Since this issue is only present in the " fallback " crypto implementation it can be avoided by en ##s uri ng that either Web Crypto or the Node ` crypto ` mod ul ##e is available in the JS environment where ` node - j ##ose ` is being run . [SEP]

LIME (words)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0 when using the non-default "fallback" crypto back-end ECC operations in `node-jose` can trigger a Denial-of-Service (DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2.2.0. Since this issue is only present in the "fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node `crypto` module is available in the JS environment where `node-jose` is being run.

SHAP (words)
node- jose is a JavaScript implementation of the JSON Object Signing and Encryption ( JOSE) for web browsers and node. js- based servers. Prior to version 2. 2. 0 when using the non- default " fallback" crypto back- end ECC operations in ` node- jose` can trigger a Denial- of- Service ( DoS) condition due to a possible infinite loop in an internal calculation. For some ECC operations this condition is triggered randomly; for others it can be triggered by malicious input. The issue has been patched in version 2. 2. 0. Since this issue is only present in the " fallback" crypto implementation it can be avoided by ensuring that either WebCrypto or the Node ` crypto` module is available in the JS environment where ` node- jose` is being run

IG (subwords)
Intelbras ▁T IP 200 ▁60 . 61 . 75 . 15 ▁T IP 200 L ITE ▁60 . 61 . 75 . 15 ▁and ▁T IP 300 ▁65 . 61 . 75 . 15 ▁devices ▁allow ▁ / c gi - bin / c gi Serv er . ex x ? page = XSS ▁ . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Intelbras TIP200 60.61.75.15 TIP200LITE 60.61.75.15 and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.

SHAP (words)
Intelbras TIP200 60. 61. 75. 15 TIP200LITE 60. 61. 75. 15 and TIP300 65. 61. 75. 15 devices allow / cgi- bin/ cgiServer. exx? page= XSS

IG (subwords)
[CLS] Intelbras T ##IP ##20 ##0 60 . 61 . 75 . 15 T ##IP ##20 ##0 ##L ##IT ##E 60 . 61 . 75 . 15 and T ##IP ##30 ##0 65 . 61 . 75 . 15 dev ice ##s allow / c ##gi - bin / c ##gi ##S ##erve ##r . ex ##x ? page = XSS . [SEP]

LRP (+Pred, pos-only)
[CLS] Intelbras T ##IP ##20 ##0 60 . 61 . 75 . 15 T ##IP ##20 ##0 ##L ##IT ##E 60 . 61 . 75 . 15 and T ##IP ##30 ##0 65 . 61 . 75 . 15 dev ice ##s allow / c ##gi - bin / c ##gi ##S ##erve ##r . ex ##x ? page = XSS . [SEP]

LIME (words)
Intelbras TIP200 60.61.75.15 TIP200LITE 60.61.75.15 and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.

SHAP (words)
Intelbras TIP200 60. 61. 75. 15 TIP200LITE 60. 61. 75. 15 and TIP300 65. 61. 75. 15 devices allow / cgi- bin/ cgiServer. exx? page= XSS

IG (subwords)
[CLS] Intelbras T ##IP ##20 ##0 60 . 61 . 75 . 15 T ##IP ##20 ##0 ##L ##IT ##E 60 . 61 . 75 . 15 and T ##IP ##30 ##0 65 . 61 . 75 . 15 dev ice ##s allow / c ##gi - bin / c ##gi ##S ##erve ##r . ex ##x ? page = XSS . [SEP]

LRP (+Pred, pos-only)
[CLS] Intelbras T ##IP ##20 ##0 60 . 61 . 75 . 15 T ##IP ##20 ##0 ##L ##IT ##E 60 . 61 . 75 . 15 and T ##IP ##30 ##0 65 . 61 . 75 . 15 dev ice ##s allow / c ##gi - bin / c ##gi ##S ##erve ##r . ex ##x ? page = XSS . [SEP]

LIME (words)
Intelbras TIP200 60.61.75.15 TIP200LITE 60.61.75.15 and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.

SHAP (words)
Intelbras TIP200 60. 61. 75. 15 TIP200LITE 60. 61. 75. 15 and TIP300 65. 61. 75. 15 devices allow / cgi- bin/ cgiServer. exx? page= XSS

IG (subwords)
▁The ▁Tran sl ▁ ation ▁module ▁in Liferay ▁Portal ▁v 7 . 4 . 3 . 12 ▁through ▁v 7 . 4 . 3 . 36 ▁and Liferay DXP ▁7 . 4 ▁update ▁8 ▁through ▁36 ▁does ▁not ▁check permissions ▁before ▁allowing ▁a ▁user ▁to ▁export ▁a ▁web ▁content ▁for ▁ tran sl ▁ ation ▁allowing ▁attackers ▁to ▁download ▁a ▁web ▁content ▁page ' s ▁ XL IFF ▁ tran sl ▁ ation ▁file ▁via ▁crafted URL ▁ . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36 and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation allowing attackers to download a web content page's XLIFF translation file via crafted URL.

SHAP (words)
The Translation module in Liferay Portal v7. 4. 3. 12 through v7. 4. 3. 36 and Liferay DXP 7. 4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation allowing attackers to download a web content page' s XLIFF translation file via crafted URL

IG (subwords)
[CLS] The T ##ran sl at ##ion mod ul ##e in Liferay Portal v ##7 . 4 . 3 . 12 through v ##7 . 4 . 3 . 36 and Liferay DXP 7 . 4 update 8 through 36 does not check permissions before allowing a user to export a web content for t ##ran sl at ##ion allowing attackers to download a web content page ' s XL IF ##F t ##ran sl at ##ion file via crafted URL . [SEP]

LRP (+Pred, pos-only)
[CLS] The T ##ran sl at ##ion mod ul ##e in Liferay Portal v ##7 . 4 . 3 . 12 through v ##7 . 4 . 3 . 36 and Liferay DXP 7 . 4 update 8 through 36 does not check permissions before allowing a user to export a web content for t ##ran sl at ##ion allowing attackers to download a web content page ' s XL IF ##F t ##ran sl at ##ion file via crafted URL . [SEP]

LIME (words)
The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36 and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation allowing attackers to download a web content page's XLIFF translation file via crafted URL.

SHAP (words)
The Translation module in Liferay Portal v7. 4. 3. 12 through v7. 4. 3. 36 and Liferay DXP 7. 4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation allowing attackers to download a web content page' s XLIFF translation file via crafted URL

IG (subwords)
[CLS] The T ##ran sl at ##ion mod ul ##e in Liferay Portal v ##7 . 4 . 3 . 12 through v ##7 . 4 . 3 . 36 and Liferay DXP 7 . 4 update 8 through 36 does not check permissions before allowing a user to export a web content for t ##ran sl at ##ion allowing attackers to download a web content page ' s XL IF ##F t ##ran sl at ##ion file via crafted URL . [SEP]